-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
RubyRuby| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| rexml | rubygems | < 3.3.3 | 3.3.3 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from inefficient parsing of specific characters (whitespace, '>]', ']>') in REXML. Similar historical vulnerabilities (e.g., CVE-2024-35176) were tied to parsing logic in BaseParser and Text classes. The described DoS behavior suggests unthrottled resource consumption during XML processing. While exact patch details are unavailable, the functions above are core to REXML's parsing workflow and align with the CWE-400/CWE-770 resource exhaustion patterns. Confidence is medium due to reliance on historical patterns and advisory descriptions rather than explicit patch diffs.
Ongoing coverage of React2Shell